@poolzin/pool-bot 2026.4.52 → 2026.4.54

package/dist/agents/model-auth.d.ts

@@ -34,4 +34,8 @@ export declare function getApiKeyForModel(params: {
     agentDir?: string;
 }): Promise<ResolvedProviderAuth>;
 export declare function requireApiKey(auth: ResolvedProviderAuth, provider: string): string;
+/**
+ * Resolve Nous Portal OAuth token.
+ */
+export declare function resolveNousToken(store: AuthProfileStore): string | undefined;
 //# sourceMappingURL=model-auth.d.ts.map

package/dist/agents/model-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"model-auth.d.ts","sourceRoot":"","sources":["../../src/agents/model-auth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,GAAG,EAAgB,KAAK,KAAK,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAIzD,OAAO,EACL,KAAK,gBAAgB,EAMtB,MAAM,oBAAoB,CAAC;AAI5B,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AA6BrF,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,aAAa,GAAG,SAAS,EAC9B,QAAQ,EAAE,MAAM,GACf,MAAM,GAAG,SAAS,CAIpB;AAwBD,wBAAgB,uBAAuB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,SAAS,CAOhG;AAqCD,MAAM,MAAM,oBAAoB,GAAG;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;CAC1D,CAAC;AAEF,wBAAsB,wBAAwB,CAAC,MAAM,EAAE;IACrD,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,aAAa,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA8GhC;AAED,MAAM,MAAM,eAAe,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AACjE,MAAM,MAAM,aAAa,GACrB,SAAS,GACT,OAAO,GACP,OAAO,GACP,OAAO,GACP,SAAS,GACT,MAAM,GACN,SAAS,CAAC;AAEd,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAuFzE;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,CAAC,EAAE,MAAM,EACjB,GAAG,CAAC,EAAE,aAAa,EACnB,KAAK,CAAC,EAAE,gBAAgB,GACvB,aAAa,GAAG,SAAS,CAwC3B;AAED,wBAAsB,iBAAiB,CAAC,MAAM,EAAE;IAC9C,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAClB,GAAG,CAAC,EAAE,aAAa,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAShC;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAIlF"}
+{"version":3,"file":"model-auth.d.ts","sourceRoot":"","sources":["../../src/agents/model-auth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,GAAG,EAAgB,KAAK,KAAK,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAIzD,OAAO,EACL,KAAK,gBAAgB,EAMtB,MAAM,oBAAoB,CAAC;AAI5B,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AA6BrF,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,aAAa,GAAG,SAAS,EAC9B,QAAQ,EAAE,MAAM,GACf,MAAM,GAAG,SAAS,CAIpB;AAwBD,wBAAgB,uBAAuB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,SAAS,CAOhG;AAqCD,MAAM,MAAM,oBAAoB,GAAG;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;CAC1D,CAAC;AAEF,wBAAsB,wBAAwB,CAAC,MAAM,EAAE;IACrD,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,aAAa,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA8GhC;AAED,MAAM,MAAM,eAAe,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AACjE,MAAM,MAAM,aAAa,GACrB,SAAS,GACT,OAAO,GACP,OAAO,GACP,OAAO,GACP,SAAS,GACT,MAAM,GACN,SAAS,CAAC;AAEd,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAuFzE;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,CAAC,EAAE,MAAM,EACjB,GAAG,CAAC,EAAE,aAAa,EACnB,KAAK,CAAC,EAAE,gBAAgB,GACvB,aAAa,GAAG,SAAS,CAwC3B;AAED,wBAAsB,iBAAiB,CAAC,MAAM,EAAE;IAC9C,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAClB,GAAG,CAAC,EAAE,aAAa,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAShC;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAIlF;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,GAAG,SAAS,CAiB5E"}

package/dist/agents/model-auth.js

@@ -316,3 +316,23 @@ export function requireApiKey(auth, provider) {
         return key;
     throw new Error(`No API key resolved for provider "${provider}" (auth mode: ${auth.mode}).`);
 }
+/**
+ * Resolve Nous Portal OAuth token.
+ */
+export function resolveNousToken(store) {
+    const profileIds = listProfilesForProvider(store, "nous");
+    for (const id of profileIds) {
+        const cred = store.profiles[id];
+        if (!cred)
+            continue;
+        if (cred.type === "token" && cred.token?.trim()) {
+            // Check if token is expired
+            if (cred.expires && cred.expires < Date.now()) {
+                // Token expired
+                continue;
+            }
+            return cred.token.trim();
+        }
+    }
+    return undefined;
+}

package/dist/agents/model-catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"model-catalog.d.ts","sourceRoot":"","sources":["../../src/agents/model-catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,aAAa,EAAc,MAAM,qBAAqB,CAAC;AAQrE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC;CACjC,CAAC;AAWF,KAAK,WAAW,GAAG,cAAc,yBAAyB,CAAC,CAAC;AAoC5D,wBAAgB,6BAA6B,SAI5C;AAGD,wBAAgB,8BAA8B,CAAC,MAAM,CAAC,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,QAEjF;AAUD,wBAAsB,gBAAgB,CAAC,MAAM,CAAC,EAAE;IAC9C,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CA0F/B;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,iBAAiB,GAAG,SAAS,GAAG,OAAO,CAEjF;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,iBAAiB,EAAE,EAC5B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,iBAAiB,GAAG,SAAS,CAQ/B"}
+{"version":3,"file":"model-catalog.d.ts","sourceRoot":"","sources":["../../src/agents/model-catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,aAAa,EAAc,MAAM,qBAAqB,CAAC;AASrE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC;CACjC,CAAC;AAWF,KAAK,WAAW,GAAG,cAAc,yBAAyB,CAAC,CAAC;AAoC5D,wBAAgB,6BAA6B,SAI5C;AAGD,wBAAgB,8BAA8B,CAAC,MAAM,CAAC,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,QAEjF;AAUD,wBAAsB,gBAAgB,CAAC,MAAM,CAAC,EAAE;IAC9C,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAkG/B;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,iBAAiB,GAAG,SAAS,GAAG,OAAO,CAEjF;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,iBAAiB,EAAE,EAC5B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,iBAAiB,GAAG,SAAS,CAQ/B"}

package/dist/agents/model-catalog.js

@@ -3,6 +3,7 @@ import { createSubsystemLogger } from "../logging/subsystem.js";
 import { resolvePoolbotAgentDir } from "./agent-paths.js";
 import { ensurePoolbotModelsJson } from "./models-config.js";
 import { gemma4Models } from "./model-catalog-gemma4.js";
+import { NOUS_MODELS } from "./nous-models.js";
 const log = createSubsystemLogger("model-catalog");
 let modelCatalogPromise = null;
 let hasLoggedModelCatalogError = false;
@@ -107,6 +108,13 @@ export async function loadModelCatalog(params) {
             if (models.length > 0) {
                 // Add Gemma 4 models
                 models.push(...gemma4Models);
+                // Add Nous Portal models
+                models.push(...NOUS_MODELS.map((m) => ({
+                    id: m.id,
+                    name: m.name,
+                    provider: "nous",
+                    contextWindow: m.contextWindow,
+                })));
                 return sortModels(models);
             }
             // Add Gemma 4 models even if no other models

package/dist/agents/nous-models.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Nous Portal Model Catalog
+ *
+ * Nous Research's portal provides access to various open-source models.
+ * Authentication: OAuth via portal.nousresearch.com
+ *
+ * @see https://portal.nousresearch.com
+ */
+export declare const NOUS_BASE_URL = "https://api.nousresearch.com/v1";
+export declare const NOUS_MODELS: readonly [{
+    readonly id: "nous-hermes-2";
+    readonly name: "Nous Hermes 2";
+    readonly contextWindow: 32768;
+    readonly description: "Nous Research's flagship model";
+}, {
+    readonly id: "nous-hermes-2-mistral-7b-dpo";
+    readonly name: "Nous Hermes 2 Mistral 7B DPO";
+    readonly contextWindow: 32768;
+    readonly description: "Mistral-based model with DPO";
+}, {
+    readonly id: "nous-capybara-34b";
+    readonly name: "Nous Capybara 34B";
+    readonly contextWindow: 32768;
+    readonly description: "Role-play focused model";
+}, {
+    readonly id: "nous-hermes-llama2-13b";
+    readonly name: "Nous Hermes Llama2 13B";
+    readonly contextWindow: 4096;
+    readonly description: "Llama2-based model";
+}];
+export type NousModelId = typeof NOUS_MODELS[number]["id"];
+export declare function getNousModel(modelId: string): typeof NOUS_MODELS[number] | undefined;
+export declare function listNousModels(): typeof NOUS_MODELS;
+//# sourceMappingURL=nous-models.d.ts.map

package/dist/agents/nous-models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nous-models.d.ts","sourceRoot":"","sources":["../../src/agents/nous-models.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,eAAO,MAAM,aAAa,oCAAoC,CAAC;AAE/D,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;EAyBd,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;AAE3D,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,WAAW,CAAC,MAAM,CAAC,GAAG,SAAS,CAEpF;AAED,wBAAgB,cAAc,IAAI,OAAO,WAAW,CAEnD"}

package/dist/agents/nous-models.js

@@ -0,0 +1,41 @@
+/**
+ * Nous Portal Model Catalog
+ *
+ * Nous Research's portal provides access to various open-source models.
+ * Authentication: OAuth via portal.nousresearch.com
+ *
+ * @see https://portal.nousresearch.com
+ */
+export const NOUS_BASE_URL = "https://api.nousresearch.com/v1";
+export const NOUS_MODELS = [
+    {
+        id: "nous-hermes-2",
+        name: "Nous Hermes 2",
+        contextWindow: 32768,
+        description: "Nous Research's flagship model",
+    },
+    {
+        id: "nous-hermes-2-mistral-7b-dpo",
+        name: "Nous Hermes 2 Mistral 7B DPO",
+        contextWindow: 32768,
+        description: "Mistral-based model with DPO",
+    },
+    {
+        id: "nous-capybara-34b",
+        name: "Nous Capybara 34B",
+        contextWindow: 32768,
+        description: "Role-play focused model",
+    },
+    {
+        id: "nous-hermes-llama2-13b",
+        name: "Nous Hermes Llama2 13B",
+        contextWindow: 4096,
+        description: "Llama2-based model",
+    },
+];
+export function getNousModel(modelId) {
+    return NOUS_MODELS.find((m) => m.id === modelId);
+}
+export function listNousModels() {
+    return NOUS_MODELS;
+}

package/dist/agents/nous-oauth.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Nous Portal OAuth Authentication
+ *
+ * Handles OAuth 2.0 authentication flow for Nous Portal.
+ *
+ * Flow:
+ * 1. User authenticates at portal.nousresearch.com
+ * 2. Portal returns access token
+ * 3. Token is stored in auth profile store
+ * 4. Token is used for API requests
+ *
+ * @see https://portal.nousresearch.com
+ */
+import { createServer } from "node:http";
+export type NousOAuthResult = {
+    success: boolean;
+    accessToken?: string;
+    refreshToken?: string;
+    expiresAt?: number;
+    error?: string;
+};
+/**
+ * Generate PKCE code verifier and challenge for OAuth 2.0 PKCE flow.
+ */
+export declare function generatePkce(): Promise<{
+    codeVerifier: string;
+    codeChallenge: string;
+}>;
+/**
+ * Open browser to Nous Portal OAuth page.
+ */
+export declare function openNousOAuthUrl(params: {
+    codeChallenge: string;
+    redirectUri: string;
+    state: string;
+}): Promise<string>;
+/**
+ * Start local OAuth callback server and return the authorization code.
+ */
+export declare function startOAuthCallbackServer(): Promise<{
+    code: string;
+    state: string;
+    server: ReturnType<typeof createServer>;
+}>;
+/**
+ * Exchange authorization code for access token.
+ */
+export declare function exchangeCodeForToken(params: {
+    code: string;
+    codeVerifier: string;
+    redirectUri: string;
+}): Promise<NousOAuthResult>;
+/**
+ * Complete Nous Portal OAuth flow.
+ * Returns access token if successful.
+ */
+export declare function completeNousOAuth(): Promise<NousOAuthResult>;
+/**
+ * Refresh Nous Portal access token using refresh token.
+ */
+export declare function refreshNousToken(params: {
+    refreshToken: string;
+}): Promise<NousOAuthResult>;
+//# sourceMappingURL=nous-oauth.d.ts.map

package/dist/agents/nous-oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nous-oauth.d.ts","sourceRoot":"","sources":["../../src/agents/nous-oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAC;AAOpF,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;GAEG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC;IAC5C,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC,CASD;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE;IAC7C,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC,MAAM,CAAC,CAalB;AAED;;GAEG;AACH,wBAAsB,wBAAwB,IAAI,OAAO,CAAC;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC;CACzC,CAAC,CAmDD;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,EAAE;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,eAAe,CAAC,CA4C3B;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,eAAe,CAAC,CA0ClE;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE;IAC7C,YAAY,EAAE,MAAM,CAAC;CACtB,GAAG,OAAO,CAAC,eAAe,CAAC,CA0C3B"}

package/dist/agents/nous-oauth.js

@@ -0,0 +1,214 @@
+/**
+ * Nous Portal OAuth Authentication
+ *
+ * Handles OAuth 2.0 authentication flow for Nous Portal.
+ *
+ * Flow:
+ * 1. User authenticates at portal.nousresearch.com
+ * 2. Portal returns access token
+ * 3. Token is stored in auth profile store
+ * 4. Token is used for API requests
+ *
+ * @see https://portal.nousresearch.com
+ */
+import { createServer } from "node:http";
+import { randomBytes } from "node:crypto";
+const NOUS_PORTAL_URL = "https://portal.nousresearch.com";
+const NOUS_OAUTH_CLIENT_ID = "poolbot";
+const NOUS_OAUTH_REDIRECT_PORT = 8889;
+/**
+ * Generate PKCE code verifier and challenge for OAuth 2.0 PKCE flow.
+ */
+export async function generatePkce() {
+    const codeVerifier = randomBytes(32).toString("base64url");
+    const encoder = new TextEncoder();
+    const data = encoder.encode(codeVerifier);
+    const digest = await crypto.subtle.digest("SHA-256", data);
+    const codeChallenge = Buffer.from(digest).toString("base64url");
+    return { codeVerifier, codeChallenge };
+}
+/**
+ * Open browser to Nous Portal OAuth page.
+ */
+export async function openNousOAuthUrl(params) {
+    const { codeChallenge, redirectUri, state } = params;
+    const oauthUrl = new URL(`${NOUS_PORTAL_URL}/oauth/authorize`);
+    oauthUrl.searchParams.set("client_id", NOUS_OAUTH_CLIENT_ID);
+    oauthUrl.searchParams.set("response_type", "code");
+    oauthUrl.searchParams.set("redirect_uri", redirectUri);
+    oauthUrl.searchParams.set("scope", "api:read api:write");
+    oauthUrl.searchParams.set("state", state);
+    oauthUrl.searchParams.set("code_challenge", codeChallenge);
+    oauthUrl.searchParams.set("code_challenge_method", "S256");
+    return oauthUrl.toString();
+}
+/**
+ * Start local OAuth callback server and return the authorization code.
+ */
+export async function startOAuthCallbackServer() {
+    return new Promise((resolve, reject) => {
+        const server = createServer(async (req, res) => {
+            if (req.url?.startsWith("/callback")) {
+                const url = new URL(req.url, `http://localhost:${NOUS_OAUTH_REDIRECT_PORT}`);
+                const code = url.searchParams.get("code");
+                const state = url.searchParams.get("state");
+                const error = url.searchParams.get("error");
+                if (error) {
+                    res.writeHead(400);
+                    res.end(`OAuth error: ${error}`);
+                    reject(new Error(`OAuth error: ${error}`));
+                    return;
+                }
+                if (!code || !state) {
+                    res.writeHead(400);
+                    res.end("Missing code or state parameter");
+                    reject(new Error("Missing code or state parameter"));
+                    return;
+                }
+                // Success page
+                res.writeHead(200, { "Content-Type": "text/html" });
+                res.end(`
+          <html>
+            <body style="font-family: sans-serif; text-align: center; padding: 50px;">
+              <h1>✅ Authentication Successful!</h1>
+              <p>You can close this window and return to the terminal.</p>
+            </body>
+          </html>
+        `);
+                resolve({ code, state, server });
+            }
+            else {
+                res.writeHead(404);
+                res.end("Not found");
+            }
+        });
+        server.listen(NOUS_OAUTH_REDIRECT_PORT, () => {
+            console.log(`OAuth callback server listening on http://localhost:${NOUS_OAUTH_REDIRECT_PORT}/callback`);
+        });
+        // Timeout after 5 minutes
+        setTimeout(() => {
+            server.close();
+            reject(new Error("OAuth timeout - user did not complete authentication"));
+        }, 5 * 60 * 1000);
+    });
+}
+/**
+ * Exchange authorization code for access token.
+ */
+export async function exchangeCodeForToken(params) {
+    const { code, codeVerifier, redirectUri } = params;
+    try {
+        const response = await fetch(`${NOUS_PORTAL_URL}/oauth/token`, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+            },
+            body: JSON.stringify({
+                grant_type: "authorization_code",
+                client_id: NOUS_OAUTH_CLIENT_ID,
+                code,
+                redirect_uri: redirectUri,
+                code_verifier: codeVerifier,
+            }),
+        });
+        if (!response.ok) {
+            const error = await response.text();
+            return {
+                success: false,
+                error: `Token exchange failed: ${error}`,
+            };
+        }
+        const data = await response.json();
+        return {
+            success: true,
+            accessToken: data.access_token,
+            refreshToken: data.refresh_token,
+            expiresAt: Date.now() + data.expires_in * 1000,
+        };
+    }
+    catch (error) {
+        return {
+            success: false,
+            error: `Token exchange error: ${error instanceof Error ? error.message : String(error)}`,
+        };
+    }
+}
+/**
+ * Complete Nous Portal OAuth flow.
+ * Returns access token if successful.
+ */
+export async function completeNousOAuth() {
+    console.log("Starting Nous Portal OAuth authentication...");
+    console.log("");
+    // Generate PKCE
+    const { codeVerifier, codeChallenge } = await generatePkce();
+    const redirectUri = `http://localhost:${NOUS_OAUTH_REDIRECT_PORT}/callback`;
+    const state = randomBytes(16).toString("base64url");
+    // Get OAuth URL
+    const oauthUrl = await openNousOAuthUrl({
+        codeChallenge,
+        redirectUri,
+        state,
+    });
+    console.log("Please open the following URL in your browser:");
+    console.log("");
+    console.log(oauthUrl);
+    console.log("");
+    console.log("After authentication, you will be redirected to the callback URL.");
+    console.log("");
+    // Start callback server
+    const { code } = await startOAuthCallbackServer();
+    console.log("Authorization code received, exchanging for token...");
+    // Exchange code for token
+    const result = await exchangeCodeForToken({
+        code,
+        codeVerifier,
+        redirectUri,
+    });
+    if (result.success) {
+        console.log("✅ Authentication successful!");
+    }
+    else {
+        console.log("❌ Authentication failed:", result.error);
+    }
+    return result;
+}
+/**
+ * Refresh Nous Portal access token using refresh token.
+ */
+export async function refreshNousToken(params) {
+    const { refreshToken } = params;
+    try {
+        const response = await fetch(`${NOUS_PORTAL_URL}/oauth/token`, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+            },
+            body: JSON.stringify({
+                grant_type: "refresh_token",
+                client_id: NOUS_OAUTH_CLIENT_ID,
+                refresh_token: refreshToken,
+            }),
+        });
+        if (!response.ok) {
+            const error = await response.text();
+            return {
+                success: false,
+                error: `Token refresh failed: ${error}`,
+            };
+        }
+        const data = await response.json();
+        return {
+            success: true,
+            accessToken: data.access_token,
+            refreshToken: data.refresh_token,
+            expiresAt: Date.now() + data.expires_in * 1000,
+        };
+    }
+    catch (error) {
+        return {
+            success: false,
+            error: `Token refresh error: ${error instanceof Error ? error.message : String(error)}`,
+        };
+    }
+}

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "2026.4.52",
-  "commit": "33af93cba3aa13f3fd09424f6dc03d6e0010d283",
-  "builtAt": "2026-04-09T03:19:04.596Z"
+  "version": "2026.4.54",
+  "commit": "e39a9ab6a078425c4ecc8428db3923797dbda064",
+  "builtAt": "2026-04-09T18:45:09.725Z"
 }

package/dist/cli/nous-auth.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Nous Portal OAuth CLI
+ *
+ * Commands for authenticating with Nous Portal.
+ */
+import type { Command } from "commander";
+export declare function registerNousAuthCli(program: Command): void;
+//# sourceMappingURL=nous-auth.d.ts.map

package/dist/cli/nous-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nous-auth.d.ts","sourceRoot":"","sources":["../../src/cli/nous-auth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AASzC,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,QAgJnD"}

package/dist/cli/nous-auth.js

@@ -0,0 +1,135 @@
+/**
+ * Nous Portal OAuth CLI
+ *
+ * Commands for authenticating with Nous Portal.
+ */
+import { defaultRuntime } from "../runtime.js";
+import { danger, info, success } from "../globals.js";
+import { formatDocsLink } from "../terminal/links.js";
+import { theme } from "../terminal/theme.js";
+import { ensureAuthProfileStore } from "../agents/auth-profiles.js";
+import { completeNousOAuth } from "../agents/nous-oauth.js";
+import { saveAuthProfileStore } from "../agents/auth-profiles/store.js";
+export function registerNousAuthCli(program) {
+    const nous = program
+        .command("nous")
+        .description("Nous Portal authentication")
+        .addHelpText("after", () => `\n${theme.muted("Docs:")} ${formatDocsLink("/providers/nous", "docs.molt.bot/providers/nous")}\n`);
+    nous
+        .command("login")
+        .description("Authenticate with Nous Portal via OAuth")
+        .action(async () => {
+        try {
+            defaultRuntime.log("");
+            defaultRuntime.log(theme.heading("Nous Portal Authentication"));
+            defaultRuntime.log(theme.muted("─────────────────────────────────────────"));
+            defaultRuntime.log("");
+            // Complete OAuth flow
+            const result = await completeNousOAuth();
+            if (!result.success) {
+                defaultRuntime.log(danger(`❌ Authentication failed: ${result.error}`));
+                defaultRuntime.exit(1);
+                return;
+            }
+            // Store token in auth profile store
+            const store = ensureAuthProfileStore();
+            const profileId = `nous:oauth:${Date.now()}`;
+            // Use TokenCredential type for OAuth access token
+            store.profiles[profileId] = {
+                type: "token",
+                provider: "nous",
+                token: result.accessToken,
+                expires: result.expiresAt,
+            };
+            // Save store
+            saveAuthProfileStore(store, undefined);
+            defaultRuntime.log("");
+            defaultRuntime.log(success("✅ Authentication successful!"));
+            defaultRuntime.log("");
+            defaultRuntime.log(info("Token stored in auth profile store."));
+            defaultRuntime.log(info("You can now use Nous Portal models."));
+            defaultRuntime.log("");
+            defaultRuntime.log(`Example: poolbot message send --model nous/nous-hermes-2 "Hello!"`);
+            defaultRuntime.log("");
+            defaultRuntime.exit(0);
+        }
+        catch (error) {
+            defaultRuntime.log(danger(`Authentication error: ${error instanceof Error ? error.message : String(error)}`));
+            defaultRuntime.exit(1);
+        }
+    });
+    nous
+        .command("status")
+        .description("Check Nous Portal authentication status")
+        .action(async () => {
+        try {
+            const store = ensureAuthProfileStore();
+            const profileIds = Object.entries(store.profiles)
+                .filter(([_, profile]) => profile.provider === "nous")
+                .map(([id]) => id);
+            if (profileIds.length === 0) {
+                defaultRuntime.log("");
+                defaultRuntime.log(info("No Nous Portal authentication found."));
+                defaultRuntime.log("");
+                defaultRuntime.log("Run 'poolbot nous login' to authenticate.");
+                defaultRuntime.log("");
+                defaultRuntime.exit(0);
+                return;
+            }
+            defaultRuntime.log("");
+            defaultRuntime.log(theme.heading("Nous Portal Authentication Status"));
+            defaultRuntime.log(theme.muted("─────────────────────────────────────────"));
+            defaultRuntime.log("");
+            for (const profileId of profileIds) {
+                const profile = store.profiles[profileId];
+                const isExpired = profile.type === "token" && profile.expires && profile.expires < Date.now();
+                const status = isExpired ? danger("❌ Expired") : success("✅ Valid");
+                defaultRuntime.log(`Profile: ${profileId}`);
+                defaultRuntime.log(`  Status: ${status}`);
+                if (profile.type === "token" && profile.expires) {
+                    const expires = new Date(profile.expires).toLocaleString();
+                    defaultRuntime.log(`  Expires: ${expires}`);
+                }
+                defaultRuntime.log("");
+            }
+            defaultRuntime.exit(0);
+        }
+        catch (error) {
+            defaultRuntime.log(danger(`Status check error: ${error instanceof Error ? error.message : String(error)}`));
+            defaultRuntime.exit(1);
+        }
+    });
+    nous
+        .command("logout")
+        .description("Remove Nous Portal authentication")
+        .option("--all", "Remove all Nous Portal tokens", false)
+        .action(async (opts) => {
+        try {
+            const store = ensureAuthProfileStore();
+            const profileIds = Object.entries(store.profiles)
+                .filter(([_, profile]) => profile.provider === "nous")
+                .map(([id]) => id);
+            if (profileIds.length === 0) {
+                defaultRuntime.log("");
+                defaultRuntime.log(info("No Nous Portal authentication found."));
+                defaultRuntime.log("");
+                defaultRuntime.exit(0);
+                return;
+            }
+            const toRemove = opts.all ? profileIds : [profileIds[0]];
+            for (const profileId of toRemove) {
+                delete store.profiles[profileId];
+            }
+            // Save store
+            saveAuthProfileStore(store, undefined);
+            defaultRuntime.log("");
+            defaultRuntime.log(success(`✅ Removed ${toRemove.length} Nous Portal token(s).`));
+            defaultRuntime.log("");
+            defaultRuntime.exit(0);
+        }
+        catch (error) {
+            defaultRuntime.log(danger(`Logout error: ${error instanceof Error ? error.message : String(error)}`));
+            defaultRuntime.exit(1);
+        }
+    });
+}

package/dist/cli/program/register.subclis.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"register.subclis.d.ts","sourceRoot":"","sources":["../../../src/cli/program/register.subclis.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOzC,KAAK,eAAe,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAElE,KAAK,WAAW,GAAG;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,OAAO,CAAC;IACxB,QAAQ,EAAE,eAAe,CAAC;CAC3B,CAAC;AAyTF,wBAAgB,gBAAgB,IAAI,WAAW,EAAE,CAEhD;AAED,wBAAgB,gCAAgC,IAAI,MAAM,EAAE,CAE3D;AAED,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAQ3F;AAaD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,GAAE,MAAM,EAAiB,QAkBrF"}
+{"version":3,"file":"register.subclis.d.ts","sourceRoot":"","sources":["../../../src/cli/program/register.subclis.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOzC,KAAK,eAAe,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAElE,KAAK,WAAW,GAAG;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,OAAO,CAAC;IACxB,QAAQ,EAAE,eAAe,CAAC;CAC3B,CAAC;AAkUF,wBAAgB,gBAAgB,IAAI,WAAW,EAAE,CAEhD;AAED,wBAAgB,gCAAgC,IAAI,MAAM,EAAE,CAE3D;AAED,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAQ3F;AAaD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,GAAE,MAAM,EAAiB,QAkBrF"}

package/dist/cli/program/register.subclis.js

@@ -308,6 +308,15 @@ const entries = [
             mod.registerTelemetryCli(program);
         },
     },
+    {
+        name: "nous",
+        description: "Nous Portal authentication and models",
+        hasSubcommands: true,
+        register: async (program) => {
+            const mod = await import("../nous-auth.js");
+            mod.registerNousAuthCli(program);
+        },
+    },
 ];
 export function getSubCliEntries() {
     return entries;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@poolzin/pool-bot",
-  "version": "2026.4.52",
+  "version": "2026.4.54",
   "description": "🎱 Pool Bot - AI assistant with PLCODE integrations",
   "keywords": [],
   "license": "MIT",